CVE-2026-25267CWE-862broken-access-control

CVE-2026-25267

High · published October 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00063 · 0.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-10-06T11:16Z
Affected products (166)
ProductVersionsFixed in
qualcomm/qca6698au_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qcc710_firmwareall versions—
qualcomm/qcm2290_firmwareall versions—
qualcomm/qcm4290_firmwareall versions—
qualcomm/qcm4325_firmwareall versions—
qualcomm/qcm4490_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6125_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcn9011_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcs2290_firmwareall versions—
qualcomm/qcs4290_firmwareall versions—
qualcomm/qcs4490_firmwareall versions—
qualcomm/qcs8550_firmwareall versions—
qualcomm/qts110_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/video_collaboration_vc5_platform_firmwareall versions—
qualcomm/robotics_rb2_platform_firmwareall versions—
qualcomm/robotics_rb5_platform_firmwareall versions—
qualcomm/sa2150p_firmwareall versions—
qualcomm/sa4150p_firmwareall versions—
qualcomm/sa4155p_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sc8380xp_firmwareall versions—
qualcomm/snapdragon_8_gen1_5g_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/snapdragon_865_5g_mobile_platform_firmwareall versions—
qualcomm/sm6225p_firmwareall versions—
qualcomm/sm6250_firmwareall versions—
qualcomm/snapdragon_g1_gen_2_gaming_platform_firmwareall versions—
qualcomm/5g_fixed_wireless_access_platform_firmwareall versions—
qualcomm/9205_lte_modem_firmwareall versions—
qualcomm/9205s_modem_firmwareall versions—
qualcomm/aqt1000_firmwareall versions—
qualcomm/ar8031_firmwareall versions—
qualcomm/c-v2x_9150_firmwareall versions—
qualcomm/csra6620_firmwareall versions—
qualcomm/csra6640_firmwareall versions—
qualcomm/csrb31024_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6800_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/flight_rb5_5g_platform_firmwareall versions—
qualcomm/fsm100_platform_firmwareall versions—
qualcomm/g1_gen_1_firmwareall versions—
qualcomm/g2_gen_1_firmwareall versions—
qualcomm/g3x_gen_2_firmwareall versions—
qualcomm/iq-615_firmwareall versions—
qualcomm/iq-8275_firmwareall versions—
qualcomm/iq-9075_firmwareall versions—
qualcomm/iqx5121_firmwareall versions—
qualcomm/iqx7181_firmwareall versions—
qualcomm/mbm415_firmwareall versions—
qualcomm/monaco_iot_firmwareall versions—
qualcomm/netrani_firmwareall versions—
qualcomm/qca0000_firmwareall versions—
qualcomm/qca2066_firmwareall versions—
qualcomm/qca4004_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6420_firmwareall versions—
qualcomm/qca6430_firmwareall versions—
qualcomm/qca6564_firmwareall versions—
qualcomm/qca6564a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/sm6450p_firmwareall versions—
qualcomm/sm6475p_firmwareall versions—
qualcomm/sm6475q_firmwareall versions—
qualcomm/sm7325p_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm7435p_firmwareall versions—
qualcomm/sm7525_firmwareall versions—
qualcomm/sm7550_firmwareall versions—
qualcomm/sm7550p_firmwareall versions—
qualcomm/sm7635p_firmwareall versions—
qualcomm/sm8475p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/smart_audio_400_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_778g\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_782g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7c_compute_platform_firmwareall versions—
qualcomm/snapdragon_7c_gen_2_compute_platform_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_865\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_870_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888\+_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8c_compute_platform_firmwareall versions—
qualcomm/snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmwareall versions—
qualcomm/snapdragon_8cx_compute_platform_firmwareall versions—
qualcomm/snapdragon_8cx_compute_platform_\"poipu_pro\"_firmwareall versions—
qualcomm/snapdragon_8cx_gen_2_5g_compute_platform_firmwareall versions—
qualcomm/snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\"_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_wear_1300_platform_firmwareall versions—
qualcomm/snapdragon_x53_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_x55_5g_modem-rf_system_firmwareall versions—
qualcomm/snapdragon_xr2_5g_platform_firmwareall versions—
qualcomm/snapdragon_xr2\+_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_auto_4g_modem_firmwareall versions—
qualcomm/vision_intelligence_400_platform_firmwareall versions—
qualcomm/wcd9306_firmwareall versions—
qualcomm/wcd9335_firmwareall versions—
qualcomm/wcd9340_firmwareall versions—
qualcomm/wcd9341_firmwareall versions—
qualcomm/wcd9360_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9371_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3910_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn3990_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 07 OCT 03:40Z
    EPSS moved — → 0%
    epss
  • 06 OCT 06:29Z
    Missing Authorization in Core
    cvelistv5